Looking in the Mirror: HHS OIG Audit Demonstrates HHS Agency’s Own Need for Focus on Cloud Security

Lexology August 20, 2024
BakerHostetler

Key Takeaways:

• In March, the Office of Inspector General of the Department of Health and Human Services (OIG) published a report of its audit of Administration for Children and Families (ACF) “data hosted in certain cloud information systems.”
• The report explains that the audit is part of a series examining “whether HHS and its Operating Divisions have implemented effective cybersecurity controls for cloud information systems in accordance with Federal security requirements and guidelines.”
• Organizations subject to regulation under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule may want to consider this report in developing their HIPAA security risk analyses and risk management plans for cloud services because, even though the ACF OIG audit applied different...

Today's Sponsors

Today's Sponsor